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DETAILED ACTION 

Examiner's Amendment 

01 . An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1 .312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview 
with Shun Yao on September 24, 2008 (see the attached Interview Summary). 
The instant Claims have been amended as follows: 
• Claim 15, line 2: after "comprising:" insert -a processor; a memory;-- 

Reasons For Allowance 

02. Claims 1 , 3 - 5, 7 - 8, 1 0 - 1 2, 1 4 - 1 5, 1 7 - 1 9, and 20 have been considered 
and deemed allowable. The following is an examiner's statement of reasons for 
allowance: 

It is the examiner's opinion that the art of record considered as a whole, alone or 
in combination, neither anticipates nor rendered obvious the specific SQL injection 
prevention technique taught by the Applicant. The Examiner finds no single prior art 
reference teaching of creating a signature cache and parsing a database query, both by 
removing field names and values, but leaving keywords and operands in tact, for SQL 
queries, as recited in independent claims 1,8, 15. A thorough search of the prior art 
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reveals the primary references of Chaudhuri (US Patent 7,194,451) and Lee ("Learning 
Fingerprints for a Database Intrusion Detection System"), which was previously used to 
reject the claims. Chaudhuri discloses a similar method in that queries can be used to 
create a signature cache. However, Chaudhuri does not disclose that the signature is 
extracted from the query itself such that names and values are removed, while retaining 
keywords and operands. Lee discloses a similar method in that queries are parsed to 
prevent intrusion. However, Lee does not disclose replacing field names, but is limited 
to field values. Therefore the Examiner believes that the independent claims, as 
amended, stand in condition for allowance over the cited prior art. 

Dependent claims 3 - 5, 7, 10 - 12, 14, and 17 - 19 are also believed to be in 
condition for allowance over the cited prior art for at least the reason listed above. 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

Conclusion 

03. Any inquiry concerning this communication or earlier communications from the 
Examiner should be directed to Christopher Raab whose telephone number is (571) 
270-1090. The Examiner can normally be reached on Monday-Friday from 8:30am to 
6:00pm. 
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If attempts to reach the Examiner by telephone are unsuccessful, the Examiner's 
supervisor, Pierre Vital can be reached on (571 ) 272-421 5. The fax phone number for 
the organization where this application or proceeding is assigned is (571) 273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free) or 703-305-3028. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist/customer service whose telephone 
number is (571)272-2600. 

Christopher Raab 
C.R./cr 

September 25, 2008 
IK. B. P.I 



/Pierre M. Vital/ 

Supervisory Patent Examiner, Art Unit 2169 



